RU2580016C1 - Способ передачи управления между областями памяти - Google Patents

Способ передачи управления между областями памяти Download PDF

Info

Publication number
RU2580016C1
RU2580016C1 RU2014141808/08A RU2014141808A RU2580016C1 RU 2580016 C1 RU2580016 C1 RU 2580016C1 RU 2014141808/08 A RU2014141808/08 A RU 2014141808/08A RU 2014141808 A RU2014141808 A RU 2014141808A RU 2580016 C1 RU2580016 C1 RU 2580016C1
Authority
RU
Russia
Prior art keywords
memory
area
region
original
execution
Prior art date
Application number
RU2014141808/08A
Other languages
English (en)
Russian (ru)
Inventor
Владислав Валерьевич Пинтийский
Дмитрий Александрович Кирсанов
Денис Вячеславович Аникин
Original Assignee
Закрытое акционерное общество "Лаборатория Касперского"
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Закрытое акционерное общество "Лаборатория Касперского" filed Critical Закрытое акционерное общество "Лаборатория Касперского"
Priority to RU2014141808/08A priority Critical patent/RU2580016C1/ru
Priority to US14/596,631 priority patent/US9116621B1/en
Priority to EP15153555.6A priority patent/EP3009935B1/en
Priority to CN201510502877.5A priority patent/CN105528179B/zh
Application granted granted Critical
Publication of RU2580016C1 publication Critical patent/RU2580016C1/ru

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02—Addressing or allocation; Relocation
    • G06F12/08—Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
    • G06F12/10—Address translation
    • G06F12/109—Address translation for multiple virtual address spaces, e.g. segmentation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3089—Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents
    • G06F11/3093—Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
    • G06F11/3466—Performance evaluation by tracing or monitoring
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
    • G06F11/3466—Performance evaluation by tracing or monitoring
    • G06F11/3476—Data logging
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02—Addressing or allocation; Relocation
    • G06F12/08—Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
    • G06F12/10—Address translation
    • G06F12/1027—Address translation using associative or pseudo-associative address translation means, e.g. translation look-aside buffer [TLB]
    • G06F12/1036—Address translation using associative or pseudo-associative address translation means, e.g. translation look-aside buffer [TLB] for multiple virtual address spaces, e.g. segmentation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
    • G06F17/40—Data acquisition and logging
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02—Addressing or allocation; Relocation
    • G06F12/08—Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
    • G06F12/10—Address translation
    • G06F12/1009—Address translation using page tables, e.g. page table structures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2201/00—Indexing scheme relating to error detection, to error correction, and to monitoring
    • G06F2201/865—Monitoring of software
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2212/00—Indexing scheme relating to accessing, addressing or allocation within memory systems or architectures
    • G06F2212/10—Providing a specific technical effect
    • G06F2212/1032—Reliability improvement, data loss prevention, degraded operation etc
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2212/00—Indexing scheme relating to accessing, addressing or allocation within memory systems or architectures
    • G06F2212/10—Providing a specific technical effect
    • G06F2212/1052—Security improvement
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2212/00—Indexing scheme relating to accessing, addressing or allocation within memory systems or architectures
    • G06F2212/65—Details of virtual memory and virtual address translation
    • G06F2212/657—Virtual address space management

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Quality & Reliability (AREA)
  • Software Systems (AREA)
  • Mathematical Physics (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Databases & Information Systems (AREA)
  • Debugging And Monitoring (AREA)
  • Human Computer Interaction (AREA)
  • Memory System Of A Hierarchy Structure (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
RU2014141808/08A 2014-10-17 2014-10-17 Способ передачи управления между областями памяти RU2580016C1 (ru)

Priority Applications (4)

Application Number Priority Date Filing Date Title
RU2014141808/08A RU2580016C1 (ru) 2014-10-17 2014-10-17 Способ передачи управления между областями памяти
US14/596,631 US9116621B1 (en) 2014-10-17 2015-01-14 System and method of transfer of control between memory locations
EP15153555.6A EP3009935B1 (en) 2014-10-17 2015-02-03 System and method of transfer of control between memory locations
CN201510502877.5A CN105528179B (zh) 2014-10-17 2015-08-14 存储器位置之间控制的转移的***和方法

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
RU2014141808/08A RU2580016C1 (ru) 2014-10-17 2014-10-17 Способ передачи управления между областями памяти

Related Child Applications (1)

Application Number Title Priority Date Filing Date
RU2016105564A Division RU2623883C1 (ru) 2016-02-18 2016-02-18 Способ выполнения инструкций в системной памяти

Publications (1)

Publication Number Publication Date
RU2580016C1 true RU2580016C1 (ru) 2016-04-10

Family

ID=53838437

Family Applications (1)

Application Number Title Priority Date Filing Date
RU2014141808/08A RU2580016C1 (ru) 2014-10-17 2014-10-17 Способ передачи управления между областями памяти

Country Status (4)

Country Link
US (1) US9116621B1 (zh)
EP (1) EP3009935B1 (zh)
CN (1) CN105528179B (zh)
RU (1) RU2580016C1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
RU2634172C1 (ru) * 2016-06-02 2017-10-24 Акционерное общество "Лаборатория Касперского" Способ передачи управления между адресными пространствами

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10983931B2 (en) * 2015-04-30 2021-04-20 Microchip Technology Incorporated Central processing unit with enhanced instruction set
RU2628921C1 (ru) 2016-03-18 2017-08-22 Акционерное общество "Лаборатория Касперского" Система и способ выполнения антивирусной проверки файла на виртуальной машине
EP3252610B1 (en) * 2016-06-02 2021-06-16 AO Kaspersky Lab System and method of transfer of control between memory locations
US10810099B2 (en) * 2017-09-11 2020-10-20 Internatinal Business Machines Corporation Cognitive in-memory API logging
CN110083520B (zh) * 2018-01-25 2022-09-13 迈普通信技术股份有限公司 数据获取方法及装置
US11347653B2 (en) 2018-08-31 2022-05-31 Nyriad, Inc. Persistent storage device management
CN109727187B (zh) * 2019-01-03 2023-05-30 北京地平线机器人技术研发有限公司 用于调整多个感兴趣区域数据的存储位置的方法和装置

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
RU2239228C2 (ru) * 2001-07-05 2004-10-27 Всероссийский научно-исследовательский институт автоматики Способ распределения времени центрального процессора между задачами в автоматизированных системах управления технологическими процессами
EP2320318A1 (en) * 1999-01-28 2011-05-11 ATI Technologies ULC Executing programs for a first computer architecture on a computer of a second architecture

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7356736B2 (en) * 2001-09-25 2008-04-08 Norman Asa Simulated computer system for monitoring of software performance
GB0418306D0 (en) * 2004-08-17 2004-09-15 Ibm Debugging an application process at runtime
US7363463B2 (en) 2005-05-13 2008-04-22 Microsoft Corporation Method and system for caching address translations from multiple address spaces in virtual machines
US8819641B1 (en) * 2006-04-27 2014-08-26 Epic Games, Inc. Program state reversing software development tool
US7945761B2 (en) 2006-11-21 2011-05-17 Vmware, Inc. Maintaining validity of cached address mappings
CN100555240C (zh) * 2007-01-16 2009-10-28 国际商业机器公司 用于诊断应用程序的方法和***
US8239832B2 (en) * 2007-05-25 2012-08-07 Microsoft Corporation In-process debugging using external debugging infrastructure
JP5664347B2 (ja) * 2011-03-04 2015-02-04 ソニー株式会社 仮想メモリシステム、仮想メモリの制御方法、およびプログラム
US8479295B2 (en) * 2011-03-30 2013-07-02 Intel Corporation Method and apparatus for transparently instrumenting an application program

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2320318A1 (en) * 1999-01-28 2011-05-11 ATI Technologies ULC Executing programs for a first computer architecture on a computer of a second architecture
RU2239228C2 (ru) * 2001-07-05 2004-10-27 Всероссийский научно-исследовательский институт автоматики Способ распределения времени центрального процессора между задачами в автоматизированных системах управления технологическими процессами

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
RU2634172C1 (ru) * 2016-06-02 2017-10-24 Акционерное общество "Лаборатория Касперского" Способ передачи управления между адресными пространствами

Also Published As

Publication number Publication date
EP3009935A1 (en) 2016-04-20
CN105528179A (zh) 2016-04-27
CN105528179B (zh) 2018-06-12
EP3009935B1 (en) 2017-11-29
US9116621B1 (en) 2015-08-25

Similar Documents

Publication Publication Date Title
RU2580016C1 (ru) Способ передачи управления между областями памяти
KR102255767B1 (ko) 가상 머신 감사를 위한 시스템 및 방법들
US10157268B2 (en) Return flow guard using control stack identified by processor register
Ligh et al. The art of memory forensics: detecting malware and threats in windows, linux, and Mac memory
US10846145B2 (en) Enabling live migration of virtual machines with passthrough PCI devices
JP6378758B2 (ja) 仮想マシンにおけるマルウェア検出のためのプロセス評価
KR102047558B1 (ko) 가상 디스크 저장 기술
US5303378A (en) Reentrant protected mode kernel using virtual 8086 mode interrupt service routines
US9990237B2 (en) Lockless write tracking
Tang et al. Exploring control flow guard in windows 10
US10261895B2 (en) System and method for transferring execution of a computer program
US10489185B2 (en) Hypervisor-assisted approach for locating operating system data structures based on attribute matching
CN114327777B (zh) 确定全局页目录的方法、装置、电子设备及存储介质
JP2022545012A (ja) メモリー・アパーチャのフラッシュ・オーダーを使用したデーター保存
US11693722B2 (en) Fast memory mapped IO support by register switch
US20180267818A1 (en) Hypervisor-assisted approach for locating operating system data structures based on notification data
US20180307516A1 (en) Transparent code patching using a hypervisor
US20150379265A1 (en) Systems And Methods For Preventing Code Injection In Virtualized Environments
US10592267B2 (en) Tree structure for storing monitored memory page data
RU2623883C1 (ru) Способ выполнения инструкций в системной памяти
US11200175B2 (en) Memory accessor invailidation
EP3252610B1 (en) System and method of transfer of control between memory locations
US20230350710A1 (en) Fast memory mapped io support by register switch
US20240095363A1 (en) Method, device, and electronic apparatus for securely passing data